Описание
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3098.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hp:operations_dashboard:*:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.85992
Высокий
10 Critical
CVSS2
Дефекты
CWE-255
Связанные уязвимости
github
почти 4 года назад
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3098.
EPSS
Процентиль: 99%
0.85992
Высокий
10 Critical
CVSS2
Дефекты
CWE-255